A threat actor claims to be selling 75 million Revolut customer records on a cybercrime forum.
The alleged Revolut data leak includes names, emails, phone numbers, addresses and partial card details. However, the claimed number of records has not been verified.
Revolut says it is aware of the listing but has found no signs of a breach.
Sample data includes customer and device details
Researchers reviewed more than 100 sample records shared in four CSV files.
Those samples contained partial payment card information. The fields included the last four digits, card type, expiry date and card status.
Email addresses, names, phone numbers and home addresses were also present. Other fields contained resident countries, registration IP addresses and account identifiers.
Some records listed device models, operating systems and timestamps. Bcrypt or Argon2id password hashes also appeared in the sample.
The newest records appeared to date from around May 2025.
Revolut says it sees no breach indicators
Revolut said it is investigating the claims.
A spokesperson said the company had found no indication of a breach. The firm also said the listing lacked evidence for the claimed scale.
The seller reportedly advertised the database for $500. Researchers called that price unusually low for a genuine 75 million-record dataset.
Researchers question the alleged data leak
Researchers could not verify the claimed 75 million-record total.
No evidence linked the samples to a known Revolut breach. Their origin therefore remains unclear.
More likely, the dataset combines information from several sources. The wording of the forum post supports that possibility.
Revolut users should watch for phishing attempts
If genuine, the records could support convincing phishing campaigns.
Names, contact details and device data can help criminals impersonate a bank or financial app. Partial card details may make scam messages seem more credible.
Revolut users should treat unexpected emails, texts and calls with caution. Never share passwords, one-time codes or card details in unsolicited messages.
A separate targeted cyberattack affected more than 50,000 Revolut customers in 2022.
0 responses to “Alleged Revolut Data Leak Puts 75 Million Customer Records Up for Sale”